Lucene search
K

9 matches found

Vulnrichment
Vulnrichment
added 2025/12/22 9:35 p.m.2 views

CVE-2023-53970 Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Reset Board Config

Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP-bound session identifiers. Attackers can exploit the vulnerable deviceManagement API endpoint to reset device configurations by sending crafte...

8.7CVSS6.7AI score0.00255EPSS
Exploits2References5
RedhatCVE
RedhatCVE
added 2025/12/17 2:0 p.m.2 views

CVE-2023-53775

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials...

7.1CVSS7.1AI score0.00154EPSS
Exploits1References1
NVD
NVD
added 2025/12/10 10:16 p.m.2 views

CVE-2023-53775

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials...

7.1CVSS0.00154EPSS
Exploits1References6
OSV
OSV
added 2025/12/10 9:16 p.m.1 views

CVE-2023-53741

Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without...

8.1CVSS5.8AI score
Exploits0References6
NVD
NVD
added 2025/12/10 9:16 p.m.2 views

CVE-2023-53741

Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without...

8.1CVSS0.00253EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/10 9:8 p.m.1 views

CVE-2023-53775 Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials...

7.1CVSS6.7AI score0.00154EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/12/10 9:8 p.m.15 views

CVE-2023-53775 Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials...

7.1CVSS0.00154EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.3 views

PT-2025-50527

Name of the Vulnerable Software and Affected Versions Screen SFT DAB version 1.9.3 Description Screen SFT DAB version 1.9.3 has an authentication issue. An attacker can bypass authentication by reusing IP-bound session identifiers due to weak session management. This allows unauthorized requests ...

8.8CVSS6.6AI score0.00211EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.2 views

PT-2025-50525

Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without...

7.1CVSS7AI score0.00253EPSS
Exploits1References8
Rows per page
Query Builder